Gentoo Archives: gentoo-dev

From: Dane Smith <c1pher@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] rejecting unsigned commits
Date: Fri, 25 Mar 2011 15:07:16
Message-Id: 4D8CAEF1.1070805@gentoo.org
In Reply to: Re: [gentoo-dev] rejecting unsigned commits by "Paweł Hajdan
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 On 03/25/2011 11:04 AM, "Paweł Hajdan, Jr." wrote:
5 > On 3/25/11 3:43 PM, Michał Górny wrote:
6 >> How about Gentoo Foundation funding devs a full blown X509 client
7 >> certs?
8 >
9 > Let's get signing and verifying working first, and then consider
10 > anything that requires funding.
11 >
12
13 +1
14
15 We do not need to get paid for X509 certs. We control portage. We
16 control the manifests. We do not need some third party CA to control the
17 certs used for signing. We have the infrastructure to do it ourselves.
18 For free. With us in control of the revocation etc.
19
20 - --
21 Dane Smith (c1pher)
22 Gentoo Linux Developer -- QA / Crypto / Sunrise / x86
23 RSA Key: http://pgp.mit.edu:11371/pks/lookup?search=0x0C2E1531&op=index
24 -----BEGIN PGP SIGNATURE-----
25 Version: GnuPG v2.0.17 (GNU/Linux)
26 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
27
28 iQIcBAEBAgAGBQJNjK7xAAoJEEsurZwMLhUxfCMP+gNozbZ7aVFl3xejgDOoAych
29 ttvHp0bDHhIzBd+hO+GvQm6RSm/keHaBi3hX6Sv0IoxK3VARK4xZ7QHrgk2xEr1V
30 4+vIv44NBpEKbmF5ilm/hWReq1CXpRnef5aL+mdlfGY3FvCVrJjeaMEu15I/TwkJ
31 wD0fqYSZxZsHLoH0UCnCEew5MJlL8oT21vOVwXbSdZJ2YlpHoAjgR6AOmOTPl+pJ
32 2ZHnQ7H+tuQr8PxH50rEba6MyrEG0Djgg8NI+w0dNgZcrWm2ODA6o6pdmh+yXlS4
33 PzvSbwDXe4K6E5i3LHjVAd4OFWS2SY6mLNrBHYR0cI0D0ZtMY3Tab3MksIvuPFaY
34 X8WwZq5+oEXZgr2poeaKHl9FIoPTqa7eFQkQA3oOPGVb2T3vwpY4JinPvj4Eb5VN
35 Yd/GnJonbuWtUx6+98b0rBmjhu51vjh7T7BTThKJbuBIJ5KH9NynOAHWpTk6ZyBf
36 IIMoiEbL/zIr6ZJlIlBP5RlMOHrE2rP+e6D4mzmDOvVT4lIRhr25eCsh3k+K6lJ3
37 bbuYCCEaowmyMe/oEwrDPzuAdG+N3v4qjB7IvGebSKfv8PSqIBxOOiejAkeFKHFP
38 Z+2xE65eaAHrr3F2sp+FwhWF9SQy4AAP+wjt1NLrdJGAHasvpn3Dp8rQ9eJq0XFJ
39 HaUJZLyeEjWwe8md+jF4
40 =0aS+
41 -----END PGP SIGNATURE-----